wimbox Privacy Policy

1. Introduction and Scope

This Privacy Policy is issued by wimbox ("we", "our platform") and applies to all individuals who visit the wimbox website, register an account, use gaming services, make deposits or withdrawals, or interact with our support team.

By using the wimbox website and related services, you agree to the collection and processing of your personal information as described in this policy. If you do not agree with any provision of this policy, you are advised not to use our platform.

2. Types of Information We Collect

wimbox collects personal information in the following categories:

a) Account Registration Information

• Full name as shown on your identity card (MyKad) or passport
• Date of birth for age verification of 21 and above
• Active mobile phone number
• Valid email address
• Username and encrypted password

b) Identity Verification Information (KYC)

• Copy of identity card (MyKad), passport or valid identification document
• Proof of current residential address (bank statement, utility bill)
• Information relating to the payment method used

c) Financial and Transaction Information

• Deposit records via Touch 'n Go eWallet, DuitNow, FPX online banking, ShopeePay and cryptocurrency
• Withdrawal records and transaction history
• E-wallet or bank account details (bank name, account number)

d) Usage and Technical Data

• IP address, device type, operating system and browser used
• Game history, session duration and betting habits
• Login information and account activity
• Cookies and related tracking technologies

3. Purpose of Processing Information

The information we collect is used for the following purposes:

• Registering and verifying new member accounts
• Conducting background checks and age verification (21+) as required by licensing conditions
• Processing deposits and withdrawals securely and accurately
• Providing 24/7 customer support in Bahasa Melayu and English
• Sending transaction notifications, account updates and relevant promotional information
• Preventing fraud, money laundering and activities that violate the terms of service
• Complying with legal obligations and international licensing requirements
• Improving the user experience and platform features based on usage analysis
• Detecting and preventing unauthorised access and cybersecurity threats

4. Legal Basis for Processing

wimbox processes your personal information on valid legal grounds, including:

• Performance of a contract: Processing necessary to provide the services you request, including account registration and financial transaction processing.
• Legitimate interests: Processing to prevent fraud, protect platform security and ensure a good user experience.
• Legal compliance: Processing required by international licensing conditions, including Know Your Customer (KYC) and anti-money laundering (AML) procedures.
• Consent: For marketing communications and promotional notifications, we rely on the consent you provided during registration.

5. Sharing Information with Third Parties

wimbox does not sell your personal information. However, we may share your data with a limited set of third-party categories in the following circumstances:

• Payment service providers: To process deposits and withdrawals via Touch 'n Go eWallet, DuitNow, FPX, ShopeePay and cryptocurrency networks, the necessary transaction information is shared with the relevant payment service providers.
• Gaming software providers: The minimum technical information required to allow you to play slots, live casino and other games on our platform.
• Regulatory authorities: When required by a licensing body, court or competent legal authority through a valid order.
• Identity verification services: Third-party KYC service providers that assist us in verifying the identity and age of members.

All third parties we work with are bound by data confidentiality agreements that require them to protect your information to a standard equal to or higher than our own.

6. Use of Cookies and Tracking Technologies

The wimbox website uses cookies and similar technologies to improve your browsing experience. The types of cookies we use:

• Essential cookies: Required for basic website functions, such as maintaining login sessions and account security. Cannot be disabled.
• Performance cookies: Collect anonymous usage data to help us understand how visitors use the website and improve the user experience.
• Functional cookies: Store your preferences such as language, display settings and information that helps us provide a more personalised experience.

You can manage cookie settings through your browser settings. However, disabling certain cookies may affect the functionality of the wimbox platform.

7. Data Security Measures

We implement a range of technical and organisational measures to protect your personal information from unauthorised access, loss, alteration or disclosure:

• Data encryption in transit using the latest TLS/SSL protocols
• Data encryption when stored on our servers
• Role-based access controls that limit staff access to only the data required
• Continuous security monitoring and regular system audits
• Data security training for all wimbox staff
• Structured and documented security incident response procedures

In the event of any data security breach that may affect you, we will notify you within a reasonable time and take the necessary steps to minimise its impact.

8. Data Retention Period

wimbox retains your personal information for as long as your account is active or as long as it is needed to provide services to you. Following account closure:

• Financial transaction and identity records are retained for the period required by licensing and relevant legal obligations.
• Data no longer needed for legal or operational purposes will be securely deleted or anonymised.
• Data required for the resolution of disputes or legal claims will be retained until those disputes are resolved.

9. Cross-Border Data Transfers

Due to the nature of an online platform, your personal information may be processed and stored on servers located outside Malaysia. In such cases, we ensure that those data transfers are subject to adequate contractual safeguards to protect your information in accordance with the international licensing standards we comply with.

10. Links to Other Websites

The wimbox website may contain links to third-party websites in certain contexts such as gaming software providers or payment processors. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policy of every website you visit. wimbox is not responsible for the privacy practices or content of third-party websites.

11. How to Contact Us About Privacy

For any enquiries, requests or complaints relating to your privacy and personal data protection, you can contact us through:

• Email: [email protected]
• Live Chat: Available 24/7 via the chat icon on the wimbox website, in Bahasa Melayu and English

We are committed to responding to every privacy-related enquiry promptly and transparently.

12. Amendments to the Privacy Policy

wimbox reserves the right to update or amend this Privacy Policy at any time. Members will be notified of any significant changes via their registered email or in-platform notifications. Continued use of the wimbox platform after an amendment takes effect will be considered your acceptance of the updated Privacy Policy.

Effective date of current policy: January 2026.